Assigning Source Configurations

After an enterprise application has been discovered, you can assign it to a user in your organization so that a subject matter expert can onboard it as a working source. This allows you to govern the application's accounts and access within Identity Security Cloud.

This user must be granted the Source Configuration Assignee user level to complete the source configurations. When you assign a source to a user, a draft version of the source is created. When the assignee completes their configurations, you can review their choices before publishing the source.

User Level Details

Administrators and Source Admins can assign a source to another user. Source Sub-admins cannot assign a source to another user, but they can be assigned the task of configuring a source.

Users must have the Source Configuration Assignee user level to access and configure the source. This user level will be granted automatically if the source is assigned by an administrator. If the source is assigned by a Source Admin, the user level will be automatically requested for the assignee and must be granted by an administrator.

Assigning Source Configurations to an Expert

After an enterprise application has been discovered, it can be onboarded as a source. You can assign the task of onboarding this application to another user. Only discovered applications can be assigned to end users.

Assigned sources must be configured as direct connections. Flat file sources are not supported.

Users can only make certain configurations on the draft source. Refer to Source Configuration Assignee User Level for more information.

To assign a source to a user:

1. Go to Admin > Connections > Sources.

2. Select Discovered Applications.

3. Select Actions > Assign Source.

4. Choose whether you will configure the basic information about the source or if the assignee will configure those details.

   Tip

   The expert will need access to details about which connector to choose, such as the business name and virtual appliance connector.

   If they do not have that understanding or access, configure those details and the assignee will add other source configurations such as connection details and aggregation settings.

   If you select The Assignee Will Do This, go directly to select the assignee.

5. If you selected I'll Do This, the list of connectors is displayed. Select Configure beside the connector that most closely corresponds to the type of source you want to create.

6. Enter the source's basic information, such as its name, owner, and the virtual appliance it should be connected to.

   Sources that you assign to other users must be direct connect sources. Flat file sources are not supported.

7. Select Actions > Assign Source.

8. Enter the name of the user you want to assign this source to. This user will have access to a draft version of this source where they can make changes without affecting your live environment.

   You can also enter a target date by which the user should finish configuring this source, and any additional information the user needs to know before they begin.

   Note

   You can assign a discovered enterprise application to a user even if a source has already been created based on the application.

   If you assign a source like this to a Source Sub-admin, they can assign their own governance group as the group responsible for managing this source. If you apply their changes, the Source Sub-admin will have access to the live source.

9. Select Assign Source.

   A draft version of the source is created.

10. If you are an administrator, and the assignee doesn't already have the appropriate user level, select Assign User Level to grant them the Source Configuration Assignee user level.

    If you are a Source Admin or Source Sub-admin, select an administrator to review your request to grant the assignee the user level, then select Request.

    When the admin grants the user the Source Configuration Assignee user level, the source is assigned to the user you selected. They will receive an email notifying them of their responsibilities. When they submit their changes to the draft source, you will review their changes and can decide whether to apply them to the live source.

Assigning an Existing Source to a User

Existing sources can be assigned to an end user for additional configurations if:

• The source was created from a discovered application.
• It is a direct connect source that can be assigned to a user.
• It is not assigned to another user.

To assign an existing source to a user:

1. Go to Admin > Connections > Sources and select the source you want to assign.

2. Select Actions > Assign Source.

3. Assign the source to a user.

   When you finish assigning the source, the user will receive an email notifying them that it has been assigned to them and they can begin configuring the draft version of the source.

Managing Assigned Sources

While a source is assigned to a user, you can answer user questions, reassign the source to another user, and review the configurations the user has already made. You can also make some changes to the source while it's assigned to the user.

Collaborating with the Assignee

You can leave comments for the assignee, and reply to comments they leave for you.

1. Go to Admin > Connections > Sources.

2. Select Assigned Applications.

3. Beside the source you want to comment on, select Actions > Review Source.

   The source's configuration page is displayed, with the edits that the user has saved so far.

4. Go to the page you want to leave a comment on.

5. At the bottom of the page, select the Add a comment field. Enter your comment and select Save. The assignee is notified by email that you left a comment.

The assignee will also be able to leave comments on the source. The administrator who assigned the source will receive an email with a link to go directly to the page with the user's comment.

Viewing and Editing Source Configurations

You can view in-progress source configurations as the assignee is completing the source.

1. Go to Admin > Connections > Sources.

2. Select Assigned Applications.

3. Beside the source you want to comment on, select Actions > Review Source.

   You can select the options in the left navigation to view the configurations the user has saved on each page.

4. Review each configuration page carefully. You can edit the fields as necessary.

   Because this is a draft source, the changes you can make are limited to the same changes the assignee can make. Refer to Source Configuration Assignee User Level for more information.

   Important

   Changes you make will overwrite the assignee's changes on those fields. The assignee can still edit the fields you complete. Be sure to collaborate with the assignee on the source to ensure you each understand the changes the other is making.

5. Select Save to save your changes.

Reassigning the Source

You can assign the configurations from a source to a different user or remove the assignee's access to the source without granting another user access.

1. Go to Admin > Connections > Sources.

2. Select Assigned Applications.

3. Beside the source you want to reassign, select Actions > Reassign Source.

   You can also select Revoke Assignment to revoke the assignee's access to this source without reassigning it to another user. If the user has been assigned other sources, they will keep the Source Configuration Assignee user level and access to those sources.

4. Enter the name of a new assignee. You can also enter a new target date and add comments for the new assignee.

5. Select Assign Source.

   The previous assignee's access to this source is removed. If the user has been assigned other sources, they will keep the Source Configuration Assignee user level and access to those sources.

   If the previous assignee does not have other sources assigned to them, you can revoke the Source Configuration Assignee user level when their assignment is removed. If you are a Source Admin or Source Sub-admin, you will be prompted to request that an admin remove the user level from the previous assignee.

Applying Changes to the Source

When the user has finished editing the source, they will submit it for review. Their access to the source will be revoked and the admin who assigned the source will receive an email stating that the user completed their configurations.

To review the user's configurations:

1. Use the link in the email to go to the source.

   You can alternatively go to Admin > Connections and select Assigned Applications.

2. Review each configuration page carefully. You can make changes to fields as necessary.

3. At the top of the page, select Review and Apply.

4. Choose whether to accept the user's changes and create a live source with their configurations or assign the source for additional changes.

   • If you select Apply Changes, a live source will be created using the configurations the user made on the draft source. The draft source will be deleted.

   • If you select Assign Source, you will reassign the draft source for additional configurations. You can select the previously-assigned user or choose a new user.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.